I have created a custom role. What I'd like for the user to be able to do is see what host the VM is on. Read-only doesn't do this. I have given performance permissions so he can change what is displayed but I can't find a way to allow him to see what host the VM is on when highlighted. Doesn't look like there is one without giving more access than he needs but I wanted to post here just in case I am missing something.
Thanks in advance.
I got it. Read-Only for the host, and NOT allowing the permission to propagate, then assigning the custom role to the folder or VM.
Answered my own question